by Kastro
Paper/Archive/CVE-2025-40074

CVE-2025-40074

Linux Linux — ipv4: start using dst_dev_rcu()

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.9.399 × 208.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF. Change ipmr_prepare_xmit(), ipmr_queue_fwd_xmit(), ip_mr_output(), ipv4_neigh_lookup() to use lockdep enabled dst_dev_rcu().

Affected

ProductAffectedFixed inSource
Linux4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 – < 864155c164654110f68a17a63bd0339754790d67864155c164654110f68a17a63bd0339754790d67CNA
Linux4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 – < e150f273cd8ed34ebc6d03758aad95c12fc58337e150f273cd8ed34ebc6d03758aad95c12fc58337CNA
Linux4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 – < 684efb2c86c887685f9aa65e1a21b3df6c1f822d684efb2c86c887685f9aa65e1a21b3df6c1f822dCNA
Linux4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 – < 923e0734c386984d45de508528a7a7ad91d791cc923e0734c386984d45de508528a7a7ad91d791ccCNA
Linux4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 – < 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a86ad8de3cefdb6ffa6708b21c567df0dbf82c43a8CNA
Linux4.13–CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/864155c164654110f68a17a63bd0339754790d67refgit.kernel.org/stable/c/e150f273cd8ed34ebc6d03758aad95c12fc58337refgit.kernel.org/stable/c/684efb2c86c887685f9aa65e1a21b3df6c1f822drefgit.kernel.org/stable/c/923e0734c386984d45de508528a7a7ad91d791ccrefgit.kernel.org/stable/c/6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8